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(54) Method and system of using personal information as a key when distributing information 



(57) A method and system that uses personal infor- 
mation as a key when distributing information. If soft- 
ware is purchased, the buyer gives the seller his or her 
credit card number and at least three additional items of 
personal information, as an example, to use as a key. 
The personal information can include, but is not limited 
to, the purchaser's social security number, telephone 
number expiration date of the credit card, address, 
mother's maiden name, children's names, bank account 
information, etc. This key is embedded in the purchased 
material. The material is then sent or downloaded to the 
purchaser. To activate the software, the purchaser must 
enter the key, which is the personal information. A com- 
parison is then made of the key embedded in the soft- 
ware and the key that was just entered. If the keys do 
not match, the software can not be installed and ac- 
cessed. If the keys do match, the software will be in- 
stalled and can be accessed. In certain instances, the 
key may need to be input every time the software is to 
be accessed. 
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Description 

BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention is directed to a key., and more 
particularly, to using personal information as a key when 
distributing information over a communications network. 

Description of the Related Art 

With the advent of the world wide web (WWW) and 
the Internet, it has become more and more difficult to 
distribute materials over the WWW without the fear of 
illegal replication. For example, books or CD quality mu- 
sic are available on the WWW through a direct path be- 
tween authors or musicians and the end users. Howev- 
er, it is extremely easy for anyone to replicate and dis- 
tribute this material to an unlimited number of people 
over the Internet. Because of this, most authors and mu- 
sicians are not willing to make their works available on 
the WWW. Therefore, to make electronic information 
distribution feasible, a mechanism is needed to make 
replication and distribution difficult for most people. 

One way to protect information is to encrypt it. In 
any encryption mechanism, the object is to make it dif- 
ficult to disseminate unauthorized information. There 
are several methods for encryption. Almost all of the en- 
cryption methods are based on the use of a "key" for 
decryption of the encrypted material. A private key is 
usually one that is difficult to decipher. In many cases, 
it is a large prime number that would take a high speed 
computer a long time, up to many years to determine. 
A key can also be words or phrases that are unrelated 
or make no sense. These words or phrase are then con- 
verted to binary form. 

However with any of the known methods for deter- 
mining a key, the person holding the key can give it to 
anyone. That person or persons can disseminate the in- 
formation to anyone they want. At that point, there is no 
telling how many people will eventually have access to 
the key and it does not matter how difficult it is to deter- 
mine the key since it was readily disclosed to others. 

SUMMARY OF THE INVENTION 

The present invention provides a method and sys- 
tem which uses personal information as a key when dis- 
tributing information over a communications network. 

In the present invention software or other media is 
purchased over a variety of media including communi- 
cations networks, U.S. mail, through a store, etc. A per- 
sonal information key is sent along with the purchase 
order and embedded in the purchased software. The 
software is then downloaded to a computer. A key is 
then typed in and compared with the key embedded in 
the software. If the keys match, then the downloaded 



software can be installed to be used. Anyone wanting 
to access the material must type in the key. For certain 
applications the key must be typed each time the mate- 
rial is to be accessed. 
s These objects, together with other objects and ad- 

vantages which will i"3 subsequently apparent, reside 
in the details of construction and operation as more fully 
hereinafter described and claimed, reference being had 
to the accompanying drawings forming a part hereof, 
10 wherein like reference numerals refer to like parts 
throughout. 

BRIEF DESCRIPTION OF THE DRAWINGS 

is Fig. 1 is a flow chart generally describing the oper- 
ation of the present invention; and 
Fig. 2 is a block diagram of a system according to 
the present invention. 

20 DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

The present invention is directed to a system and 
method which uses personal information as a key for 
25 protecting information sent over a communications net- 
work. As shown in the flow chart of Fig. 1 , merchandise 
is purchased in step 101. Personal information is then 
forwarded along with a purchase order to a seller. The 
personal information is then embedded in the pur- 
se chased merchandise by the seller as a key as shown in 
step 102. Step 103 forwards the purchased merchan- 
dise along with the key embedded therein to the buyer. 
It should be noted that the key may be sent separately 
or may be sent with additional merchandise particularly 
35 if the buyer already has the purchased merchandise or 
portions of the purchased merchandise in his or her pos- 
session. 

To access the purchased merchandise, the buyer 
must enter a key in step 104. The keys are then com- 

40 pared in step 105. If the entered key matches the em- 
bedded key, the purchased merchandise is stored or in- 
stalled on the purchaser's computer in step 106. If the 
keys do not match, the process returns to step 104. The 
present invention will now be explained in detail with re- 

45 spect to the system shown in Fig. 2. 

As shown in Fig. 2 : digital data such as software, 
CD's, books, movies, etc., is purchased over a tele- 
phone 10, through a store 12, by way of computer 14, 
through the mails 1 6 or by other communications devic- 

50 es. A key 18 is then designed based on information ob- 
tained from the purchaser The key 18 can include al- 
pha, numeric or alphanumeric information. Particularly, 
the key 18 includes personal information. 

If software is purchased from a store 12. for exam- 

55 pie. then the purchaser contacts the seller 20 of the soft- 
ware by various means such as telephone 10. computer 
14, mail 16. etc. The purchaser then provides informa- 
tion to the seller 20 necessary to design the key 1 6. The 
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seller 20 then forwards additional software 22, along 
with the key 18, either via a floppy disk or electronically, 
to the purchaser. Additionally, the seller 20 can forward 
just the key 1 8 to the purchaser or, if the software is pur- 
chased electronically, the key 1 8 is forwarded along with 
the purchased software. Upon receipt of the key 18. the 
purchaser can download and store the already pur- 
chased software. That is, it is embedded in the pur- 
chased software. The key 18 is used for protection of 
the digital data from access by others when it is down- 
loaded to the purchaser. 

The personal information that makes up the key 18 
can include such information as a credit card number, 
name, address, telephone number, expiration date of 
thecard : etc., and any combination thereof. Particularly, 
it is advantageous that at least three pieces of personal 
information be used as the key. This is because it might 
be easy for someone to intercept a credit card number 
and use it but it is not easy to know the credit card hold- 
er's mother's name, maiden name, spouse's name, chil- 
dren's names, birthdate, social security number, etc. 
Credit card information is only used as an example. 
Bank account information can also be used along with 
additional personal information, or any other type of in- 
formation that is personal to the buyer that is not easily 
known by others. 

As noted above, if the merchandise is electronically 
purchased, the key 18, including personal information, 
is forwarded to the seller 20 along with the purchase or- 
der for the merchandise. If the merchandise is pur- 
chased at a store, for example, the purchaser contacts 
the seller 20, via any known means of communication, 
to provide the seller with personal information so that 
the key 18 can be designed and embedded in the mer- 
chandise and delivered to the purchaser. The personal 
information used to design the key 18 can be forwarded 
to the seller by numerous means including, but not lim- 
ited to, telephone lines 24, over the WWW 26 or the In- 
ternet 28, or in a floppy disk by mail 16, as examples. 

The key 1 8 is then embedded in the software by the 
seller 20 in a conventional manner. It should be noted 
that the personal information used to design the key 18 
can be encrypted either by the purchaser before being 
sent to the seller 20 or by the seller 20 when it is em- 
bedded in the software. The merchandise, such as soft- 
ware, including the key 1 8 is then sent to the purchaser 
The merchandise can be sent by way of CD, floppy disk, 
modem, mail, etc. The software is then downloaded to 
the purchaser's computer 30. The purchaser's computer 
30 can be, for example, a multimedia computer, but is 
not limited thereto. 

Installation software 32 in the purchaser's computer 
30 receives the purchased merchandise. For example, 
if the purchased merchandise is a music CD the pur- 
chaser needs to access the music CD. A prompt is giv- 
en, by software internal to the computer 30. to enter a 
key 36. This is done by typing in the key 36, e.g.. the 
personal information embedded in the merchandise, us- 



ing, for example, a keyboard 34. The installation soft- 
ware 32 in the purchaser's computer 30 then compares 
the key 18 embedded in the merchandise with the typed 
key 36. The comparison is performed either by a com- 
5 parator or with comparison software, both internal to the 
purchaser's computer 30 and not shown. If the two keys 
match, the data can then be stored (installed) in the pur- 
chaser's computer 30. If the keys do not match, then the 
merchandise is not installed. 
10 if the key 18 was encrypted, it must be decrypted 
by a decryption device or software in the purchaser's 
computer 30. The key 1 8 is decrypted unbeknownst to 
the user. That is, decryption automatically occurs. 

Once it is determined that the keys match, and if the 
?5 merchandise purchased is, for example, a music CD, 
the software is then sent as binary information to a play- 
er 38 which is part of the purchaser's computer 30 or is 
attached to the purchaser's computer 30. Then, if, for 
example, the merchandise is a music CD, the CD can 
20 be played. 

The player 38 in the purchaser's computer 30 can 
be a CD player, a movie player, a picture viewer or a text 
viewer. The player 38 can also be software in the com- 
puter 30 that can play the received software. In this in- 
25 stance, the player 38 requires the key 18 every time it 
plays the merchandise. That is, every time the purchas- 
er wants to access the merchandise, the key 36 must 
be entered and compared with the key 18 embedded in 
the merchandise to access the software. 
30 Thus, because the merchandise such as a music 
CD, software, etc., cannot be accessed unless a key 
containing personal information is input this will deter 
the purchaser from passing on the purchased merchan- 
dise because it will require disclosure of the purchaser's 
35 personal information. Users will not be willing to reveal 
their key if it is based on something as personal as their 
credit card information including their credit card 
number, expiration date, holder's name, address, tele- 
phone number, social security number, maiden name, 
40 mother's name, bank account information, etc. Although 
the personal information is used to purchase the soft- 
ware, it is not readily available to others for their use. 

The foregoing is considered as illustrative only of 
the principles of the invention. Further, since numerous 
modifications and changes will readily occur to those 
skilled in the art, it is not desired to limit the invention to 
the exact construction and applications shown and de- 
scribed, and accordingly, all suitable modifications and 
equivalents may be resorted to, falling within the scope 
50 of the invention and the appended claims and their 
equivalents. 

Claims 

55 

1. A method for using personal information as a key, 
said method comprising the steps of: 
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a) purchasing software; 

b) sending personal information to the seller of 
the software; 

c) embedding the personal information in the 
purchased software as a key for accessing the s 
software; 

d) downloading the purchased software to an 
electronic medium; 

e) asking for the key, by a prompt from the elec- 
tronic medium, before the purchased software H> 
can be installed in the electronic medium; 

f) entering the key to the electronic medium; 

g) comparing the entered key with the key em- 
bedded in the software; and 

h) storing and installing the downloaded soft- is 
ware if the keys match. 

2. A method according to claim 1 . further comprising 
the step of: 

i) entering the key every time the software is 20 
to be accessed. 

3. A method according to claim 1 : wherein in said step 
b), the personal information includes a combination 

of information including credit card number, name, 25 
expiration date of the credit card, address and tel- 
ephone number, plus at least one of a social secu- 
rity number of the card holder birth date, spouses 
name, children's names, maiden name, bank ac- 
count number other related personal information of 30 
the card holder and any combination thereof. 

4. A method according to claim 1 , wherein said step 
a) comprises purchasing the software over a com- 
munications network. 35 

5. A method according to claim t , wherein said step 
a) comprises purchasing the software through the 
U.S. mail. 

40 

6. A method according to claim 1 : wherein said step 

a) comprises purchasing the software through a 
store. 

7. A method according to claim 1 ; wherein in said step 45 

b) , the personal information is sent over a commu- 
nications network. 

8. A method according to claim 7, wherein the com- 
munications network is a telephone communica- 50 
tions network. 

9. A method according to claim 7, wherein the com- 
munications network is a computer network. 

55 

10. A method according to claim 1, wherein said step 
d) includes downloading the software over any type 
of medium. 



11. A method according to claim 1 0, wherein the medi- 
um is a multimedia computer 

12. A method according to claim 1, wherein said step 
d) comprises downloading the purchased software 
as binary information to a player attached to a pur- 
chaser's computer 

13. A method according to claim 12, wherein said step 
f) includes entering the key on a keyboard of the 
purchaser's computer. 

14. A method according to claim 1 3, wherein the player 
is one of a CD player movie player, picture viewer 
text viewer and software that plays. 

15. A method according to claim 13, wherein the soft- 
ware is downloaded as player information running 
on the purchaser's computer. 

16. A method according to claim 15, wherein the player 
is one of a CD player, movie player picture viewer, 
text viewer and software that plays. 

17. A method according to claim 16, wherein the player 
requires a key every time it plays the software. 

18. A system using personal information as a key in en- 
cryption, said system comprising: 

means for purchasing software; 
a device for entering information to purchase 
said software, including entering personal in- 
formation; 

means for embedding said personal informa- 
tion in said software to be purchased; 
downloading means for downloading said pur- 
chased software to a computer: and 
a comparator for comparing said personal in- 
formation input from said device for entering in- 
formation with said personal information em- 
bedded in said purchased software, said pur- 
chased software installed only if there is a 
match. 

1 9. A system according to claim 1 8, wherein every time 
said software is to be accessed, said personal in- 
formation must be input, by said device for entering, 
and compared, by said comparator, with said per- 
sonal information embedded in said purchased 
software. 

20. A system according to claim 18, wherein said de- 
vice for entering information comprises a keyboard. 

21 . A system according to claim 1 8, wherein said com- 
puter comprises a multimedia computer 



BNSOOCID: <EP__064455OA2J_> 



4 



7 EP 0 844 550 A2 8 

22. A system according to claim 18, wherein said 
means for purchasing software is a computer con- 
nected to the Internet. 

23. A system according to claim 18, wherein said s 
means for purchasing software is a telephone. 

24. A system according to claim 18, wherein said 
means for purchasing software is in a store. 

10 

25. A system according to claim 18, wherein said per- 
sonal information comprises alpha, numeric or al- 
phanumeric information. 

26. A system according to claim 25, wherein said per- is 
sonal information includes credit card information 
including at least a credit card number, name of 
credit card holder and expiration date. 

27. A system according to claim 26. wherein said credit 20 
card information includes information selected from 

at least three or more of an address, telephone 
number, mother's maiden name : date of birth, and 
related personal information. 

25 

28. A system according to claim 25, wherein said per- 
sonal information includes bank account informa- 
tion. 

29. A system according to claim 2S : wherein said bank 30 
account information includes information selected 
from at least three of the following items including 
account number name, social security number, ad- 
dress, telephone number, mother's maiden name, 
spouses name, children's names and other related 35 
information. 

30. A system according to claim 18, further comprising 
encryption means for encrypting said personal in- 
formation. 40 

31 . A system according to claim 30, further comprising 
decryption means for decrypting said encrypted 
personal information. 

45 

32. A system according to claim 31, wherein said de- 
cryption means is a player in said computer. 

33. A system according to claim 32, wherein said player 

is one of a CD player, movie player, picture viewer, so 
and text viewer. 

34. A system according to claim 32. wherein said player 
is software that plays. 

55 



BNSOOCID: <EP_06A45S0A2J_> 



5 



EP 0 844 550 A2 



FIG. 1 




BNSDOCID: <EP 0B44S5QA3 J ^ 



6 



* 

- i 



EP 0 844 550 A2 




BNSOOCIO: <EP_0644S50A2J_> 



7 




This Page Blank (uspto) 



(19) 



J 



Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



(12) 



(88) Date of publication A3: 

16.06.1999 Bulletin 1999/24 

(43) Date of publication A2: 

27.05.1998 Bulletin 1998/22 

(21) Application number: 97308625.9 

(22) Date of filing: 29.10.1997 



(n) EP 0 844 550 A3 

EUROPEAN PATENT APPLICATION 

(51) mt ci. 6 : G06F 1/00 



(84) Designated Contracting States: 


(72) Inventor: Civanlar, Mehmet Reha 


AT BE CH DE DK ES Fl FR GB GR IE IT LI LU MC 


Red Bank, New Jersey 07701 (US) 


NL PT SE 




Designated Extension States: 


(74) Representative: Harding, Richard Patrick et al 


AL LT LV RO SI 


Marks & Clerk, 




Nash Court, 


(30) Priority: 20.11.1996 US 752119 


Oxford Business Park South 




Oxford OX4 2RU (GB) 


(71) Applicant: AT&T Corp. 




New York, NY 10013-2412 (US) 





CO 

< 

o 
in 
in 

oo 
o 
a. 

LU 



(54) Method and system of using personal information as a key when distributing information 



(57) A method and system that uses personal infor- 
mation as a key when distributing information. If soft- 
ware is purchased, the buyer gives the seller his or her 
credit card number and at least three additional items of 
personal information, as an example, to use as a key. 
The personal information can include, but is not limited 
to, the purchaser's social security number, telephone 
number, expiration date of the credit card, address, 
mother's maiden name, children's names, bank account 
information, etc. This key is embedded in the purchased 
material. The material is then sent or downloaded to the 
purchaser. To activate the software, the purchaser must 
enter the key, which is the personal information. A com- 
parison is then made of the key embedded in the soft- 
ware and the key that was just entered. If the keys do 
not match, the software can not be installed and ac- 
cessed. If the keys do match, the software will be in- 
stalled and can be accessed. In certain instances, the 
key may need to be input every time the software is to 
be accessed. 
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